Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9C95/98E731C847A011F1B09F60C1A2833773/CqAPpYxAjQbIlNjrrzidTFAQVEM.mft
File:                     CqAPpYxAjQbIlNjrrzidTFAQVEM.mft (raw, json)
Hash identifier:          gc1OzllWomZeYqpJRAztyP0bELuIt7uGABrdDkEqV/k=
Subject key identifier:   C4:FC:EC:79:BF:C2:AB:A7:BF:85:69:1D:C4:08:34:C0:17:2D:36:E7
Authority key identifier: 0A:A0:0F:A5:8C:40:8D:06:C8:94:D8:EB:AF:38:9D:4C:50:10:54:43
Certificate issuer:       /CN=A91D9C95/serialNumber=0AA00FA58C408D06C894D8EBAF389D4C50105443
Certificate serial:       37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CqAPpYxAjQbIlNjrrzidTFAQVEM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D9C95/98E731C847A011F1B09F60C1A2833773/CqAPpYxAjQbIlNjrrzidTFAQVEM.mft
Manifest number:          37
Signing time:             Wed 19 Aug 2026 09:19:53 +0000
Manifest this update:     Wed 19 Aug 2026 09:19:53 +0000
Manifest next update:     Wed 26 Aug 2026 09:19:53 +0000
Files and hashes:         1: CqAPpYxAjQbIlNjrrzidTFAQVEM.crl (hash: f4xID/4BktmycsLN6PdZMOZTeT2JpMQHv4El68wSPHA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D9C95/98E731C847A011F1B09F60C1A2833773/CqAPpYxAjQbIlNjrrzidTFAQVEM.crl
                          rsync://rpki.apnic.net/member_repository/A91D9C95/98E731C847A011F1B09F60C1A2833773/CqAPpYxAjQbIlNjrrzidTFAQVEM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CqAPpYxAjQbIlNjrrzidTFAQVEM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 09:19:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 55 (0x37)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D9C95, serialNumber=0AA00FA58C408D06C894D8EBAF389D4C50105443
        Validity
            Not Before: Aug 19 09:19:53 2026 GMT
            Not After : Aug 26 09:19:53 2026 GMT
        Subject: CN=6a857539-7786
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:34:9c:66:09:bf:ce:78:f8:f4:77:28:31:38:
                    24:91:82:25:36:b0:85:54:79:88:b8:01:0e:7e:e2:
                    39:20:b1:10:66:91:42:17:a3:2e:09:30:0f:9f:08:
                    5f:15:f0:46:29:c6:bf:4a:6a:60:8d:e9:e8:9d:8c:
                    a6:0d:25:04:37:2a:2c:87:44:46:ea:46:71:e8:9b:
                    52:a9:37:73:82:f0:e9:4f:45:b7:cd:7c:76:91:fd:
                    9a:d7:7e:e8:08:6e:3a:f5:cc:94:a9:e0:5d:12:ce:
                    3e:82:58:50:49:6e:1d:42:b6:52:80:ac:1f:e8:4b:
                    eb:ed:9f:55:b8:78:06:7a:b0:fb:36:06:a7:2a:b6:
                    38:81:17:e0:28:26:b7:3a:ba:99:17:cc:86:f8:0f:
                    69:db:90:8c:30:47:c7:b4:22:f4:4a:f0:aa:58:e5:
                    74:bc:90:9f:d2:3f:d0:65:cd:ac:62:42:58:50:4a:
                    67:b2:e4:c0:88:fa:93:f1:f1:29:ea:83:9a:0c:13:
                    f1:85:b0:4f:f5:8c:b8:d3:94:17:16:1e:45:15:83:
                    6b:81:80:d8:56:e0:22:c5:80:5c:e7:bc:2a:00:5e:
                    e2:de:2f:b2:bd:91:0b:5a:fd:a6:d5:d2:71:16:5a:
                    ad:79:0d:4c:e4:be:64:44:53:21:e2:5a:70:90:eb:
                    a1:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:FC:EC:79:BF:C2:AB:A7:BF:85:69:1D:C4:08:34:C0:17:2D:36:E7
            X509v3 Authority Key Identifier:
                keyid:0A:A0:0F:A5:8C:40:8D:06:C8:94:D8:EB:AF:38:9D:4C:50:10:54:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D9C95/98E731C847A011F1B09F60C1A2833773/CqAPpYxAjQbIlNjrrzidTFAQVEM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CqAPpYxAjQbIlNjrrzidTFAQVEM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9C95/98E731C847A011F1B09F60C1A2833773/CqAPpYxAjQbIlNjrrzidTFAQVEM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:6a:52:5c:90:9c:48:75:d6:bf:7b:21:f6:9e:cb:b2:10:32:
         ce:a7:0e:54:af:c2:9a:96:f7:3d:fe:fd:4a:e2:cf:6e:4b:46:
         da:7f:b1:02:b2:e7:4f:8c:54:46:7c:00:2b:8e:de:8d:01:cb:
         77:78:4e:95:da:94:20:9a:7f:5b:4a:9c:dc:f8:ef:57:e8:6b:
         9e:2c:1c:63:40:43:77:e6:9c:f9:d5:6d:28:2c:00:96:b8:98:
         a9:65:4d:df:67:83:52:7b:f6:02:53:ad:fe:2b:8c:56:e8:23:
         49:e6:e1:cf:d8:17:88:dc:20:29:01:64:b4:1a:64:24:5c:b1:
         60:0e:34:10:fc:c9:a9:29:2e:e6:68:6f:b7:66:ca:0c:b1:2f:
         3f:08:92:55:d0:c4:62:ba:35:13:48:72:dc:06:56:06:a0:1f:
         c4:a5:ff:d7:5f:0f:95:9f:21:1b:80:b1:ff:94:4d:64:17:26:
         03:34:41:e3:80:03:fa:49:93:e2:a1:5d:e1:d1:4f:05:c2:ea:
         13:5c:54:74:6d:11:21:6b:66:41:3a:d4:b2:6a:21:cc:c5:48:
         4e:a9:5e:5b:d3:2d:67:dd:54:95:86:e1:8a:02:3d:4c:c7:61:
         b7:c0:d6:76:db:24:64:4d:b8:59:b9:91:53:4a:d1:68:27:e3:
         7c:f8:72:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:48:17 2026 by rpki-client